Security Bulletin: Due to use of Apache Kafka, IBM Operations Analytics - Log Analysis is vulnerable to RCE/Denial of Service attack.

Summary Apache Kafka is used by IBM Operations Analytics - Log Analysis as part of Logstash data distribution capabilities. CVE-2025-27819. Vulnerability Details CVEID:CVE-2025-27819 DESCRIPTION: In CVE-2023-25194, we announced the RCE/Denial of service attack via SASL JAAS JndiLoginModule...

MegaSys Enterprises Telenium Online Web Application

RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthenticated attacker to inject arbitrary operating system commands through a crafted HTTP request, leading to remote code execution on the server in the security context of the web application service account. 2...

From Trace to Line: LLM Agent for Real-World OSS Vulnerability Localization

Large language models show promise for vulnerability discovery, yet prevailing methods inspect code in isolation, struggle with long contexts, and focus on coarse function- or file-level detections - offering limited actionable guidance to engineers who need precise line-level localization and...

Cloud Investigation Automation Framework (CIAF): An AI-Driven Approach to Cloud Forensics

Large Language Models LLMs have gained prominence in domains including cloud security and forensics. Yet cloud forensic investigations still rely on manual analysis, making them time-consuming and error-prone. LLMs can mimic human reasoning, offering a pathway to automating cloud log analysis. To...

CVE-2025-59938

Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions starting from 3.8.0 to before 4.11.0, wazuh-analysisd is vulnerable to a heap buffer overflow when parsing XML elements from Windows EventChannel messages. This issue has been patched in...

CodeQL zero to hero part 5: Debugging queries

When you're first getting started with CodeQL, you may find yourself in a situation where a query doesn't return the results you expect. Debugging these queries can be tricky, because CodeQL is a Prolog-like language with an evaluation model that's quite different from mainstream languages like...

Hacking-Tools-Master

🔐 Hacking-Tools Master A modular & documented collection of P...

MAL-2025-47823 Malicious code in phoenix-platform (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69b500d89836dd1a319cc80d28b1c005dc428afe1520fea95cd3f82b8109bc87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in phoenix-platform (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69b500d89836dd1a319cc80d28b1c005dc428afe1520fea95cd3f82b8109bc87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47826 Malicious code in rc-phoenix-tpp-upper-funnel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7339748c4b25b1fb792f426edc2468aea1f9a626a53d8b25a29b364b48165d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in commondatalayer-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ade9f77c27855eda32e445a304d4f4bd3f00bc8cde8b1cfd8b6785f958a702f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SVG Security Analysis Toolkit

SVG Security Analysis Toolkit contains specialized Python tools for analyzing potentially malicious SVG files and detecting security mechanisms...

MAL-2025-47820 Malicious code in propeller-solver-core (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a79fc2ce4f8dbef3a36ad1dcf36011f9d86435f347aa81ed601295d75e818b04 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Pentesting-Assistant

Pentesting-Assistant AI-powered penetration testing assist...

CVE-2025-59938

Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions starting from 3.8.0 to before 4.11.0, wazuh-analysisd is vulnerable to a heap buffer overflow when parsing XML elements from Windows EventChannel messages. This issue has been patched in...

omolab-conf-analysis (>=0.0.1, <=0.0.2) potentially affected by CVE-2025-59842 via jupyterlab (2.2.8)

jupyterlab PYPI version 2.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - omolab-conf-analysis =0.0.1, =0.0.2 Source cves: CVE-2025-59842 Source advisory: OSV:GHSA-VVFJ-2JQX-52JM...

Malicious code in rack-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 486f75e4ca656b6182f940e14f4a16bb48bef108e68163afe3f0ecb9d65465ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47863 Malicious code in test-prob-to2324 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4628b79fab4d286704a53af4e8df8cc72149ff0b04b72d4a8ec23983ed62f92d The OpenSSF Package Analysis project identified 'test-prob-to2324' @...

Malicious code in filecoin-checker-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6196805b97dfa338fede5b1f871b87e26bfe4909ed5ac6a26c580e29f40cd85d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

A Global Analysis of Cyber Threats to the Energy Sector: "Currents of Conflict" from a Geopolitical Perspective

The escalating frequency and sophistication of cyber threats increased the need for their comprehensive understanding. This paper explores the intersection of geopolitical dynamics, cyber threat intelligence analysis, and advanced detection technologies, with a focus on the energy domain. We...